Security Advisory

CVE-2020-15887

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-07-23 13:36:34

Last updated 2024-08-04 13:30:22

Assigner mitre

State PUBLISHED

Description

A SQL injection vulnerability in softwareupdate_controller.php in the Software Update module before 1.6 for MunkiReport allows attackers to execute arbitrary SQL commands via the last URL parameter of the /module/softwareupdate/get_tab_data/ endpoint.

← Browse all CVEs View on cve.org ↗